this post was submitted on 19 Feb 2025
100 points (100.0% liked)
BuyFromEU
6820 readers
19 users here now
Welcome to BuyFromEU - A community dedicated to supporting European-made goods and services!
Feel free to post, comment and vote, be excellent to each other and follow the rules.
We also invite you to subscribe to:
Logo generated with mistral le chat Banner by Christian Lue on unsplash.com
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I think none of us have to worry about privacy on hetzner too much - we're simply not that interesting.
Having said that, ideologically I cannot use them due to them facilitating a MitM attack. Not sure if this is the original, but if you're curious about the low level detail - you can read through it here.
Fair point.
I also don't like that NextCloud is implemented in PHP but at least it is widely used and gets some attention.
As much as I dislike php - nextcloud seems to be developed in a decent way. Been running a personal publicly exposed instance for 7 years now - no security concerns so far.
About the mitm. I couldn't find in the text a report of how the mitm attack was done. How was the network reconfigured. If Russia got the password for example and used that hetzner and linode aren't at fault.
It's there. Hetzner helped with issuing a lets encrypt cert for the mitm proxy. The only reason they got caught was because they forgot to renew it. So while the real owner had all certs in order, the mitm proxy was serving an expired one.